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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1.-95. (Cancelled) 

96. (Currently amended) A method for anonymously indexing an electronic record system, the 
method comprising: 

storing an asymmetric cryptographic private key xmder the control of a portable storage 
device of a registered user; 

storing an anonymous public key certificate, the anonymous public key certificate being 
associated with an asymmetric cryptographic public key matching the asymmetric cryptographic 

private key; 

providing the portable storage device with information for associating the registered user 
with the portable storage device; and 

indexing^ within [[an]] the electronic record system^ personal information of the 
registered user, wherein w h e reby association of the personal information with the registered user 
is anonymously verifiable by use of the anonymous public key certificate. 

97. (Currently amended) The method of claim 96 wherein the infonnation for associating the 
registered user with the p ortable storage device is provided with at least one of: 

human readable informatio n for associating th e regist e r e d user with the portable storag e 
device ; and 

machine readable informatio n for associating th e r e gist e r e d us e r with th e portabl e storag e 
device upon pres e ntation of the portabl e storag e d e vic e. 
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98. (Currently amended) The method of claim 96 wherein the portable storage device is at least 
one of: a smartcard[[;]] and an electronic passport. 

99. (Previously presented) The method of claim 96 wherein the indexing comprises associating 
with each item of personal information of the registered user an electronic record pointer, and 
wherein the anonymous public key certificate contains the electronic record pointer. 

100. (Ctirrently amended) The method of claim 96, wherein storing of the asymmetric 
cryptographic private key under the control of the portable storage device comprises at least one 
of: 

storing the asymmetric cryptographic private key in the portable storage device; 

storing an access code in the portable storage device allowing access to the asymmetric 
cryptographic private key; and 

copying the asymmetric cryptographic private key into the possession of an 
authoris e d authorized user. 

101. (Currently amended) The method according to claim 99 wherein digital signature codes are 
created for given data items within the electronic record system in order to explicitly link each 
digitally signed data item to the value of an electronic record pointer associated with the digital 
signature codes. 

102. (Currently amended) The method according to claim 96 wherein digital signature codes are 
created for given data items in the electronic record system using an — the asymmetric 
cryptographic private ke y issu e d to the r e gist e red p e rson , where each digital signature code is 
interpreted as explicitly recording the consent of the registered person to the creation of each 
respective digitally signed data item. 

103. (Currently amended) An anonymously indexed electronic record system comprising: 
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a portable storage device for a registered user, an asymmetric cryptographic private key 
being under the control of the portable storage device, the portable storage device being provided 
with information for associating the registered user with the portable storage device; 

a stored anonymous public key certificate associated with an asymmetric cryptographic 

public key matching the asymmetric cryptographic private key[[,]];_and 

an electronic storage indexing personal infonnation of the registered user, 

whereby association of the personal infonnation with the registered user is anonymously 

verifiable by use of the anonymous public key certificate. 

104. (Currently amended) The system of claim 103 wherein the information for associating the 
registered user with the portable storage device is provid e d with at least one of: 

human readable informatio n for associating the register e d user with the portable storage 
devic e; and 

machine readable informatio n for associating th e r e gist e r e d us e r with th e portabl e storag e 
device upon pr e sentation of the portabl e storag e devic e. 

105. (Currently amended) The system of claim 103 wherein the portable storage device is at least 
one of: a smartcard[[;]] and an electronic passport. 

106. (Previously presented) The system of claim 103 wherein the electronic storage indexes the 
personal information by having associated with each item of personal information of the 
registered user an electronic record pointer, and wherein the anonymous public key certificate 
contains the electronic record pointer. 

107. (Previously presented) The system of claim 106 wherein digital signature codes are created 
for given data items within the electronic record system in order to explicitly link each digitally 
signed data item to the value of an electronic record pointer associated with the digital signature 
codes. 
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108. (Previously presented) The system of claim 103 wherein digital signature codes are created 
for given data items in the electronic record system using an asymmetric cryptographic private 
key issued to the registered person, where each digital signature code is interpreted as explicitly 
recording the consent of the registered person to the creation of each respective digitally signed 
data item. 

109. (Previously presented) The system of claim 103 wherein the anonymous public key 
certificate contains a personal data component. 

110. (Previously presented) The system of claim 109 wherein the personal data component 
comprises biometric data of the registered user. 

111. (Previously presented) The system of claim 103, wherein the asymmetric cryptographic 
private key is stored in the portable storage device. 

112. (Previously presented) The system of claim 103, wherein an access code is stored in the 
portable storage device allowing access to the asymmetric cryptographic private key. 

113. (Currently amended) The system of claim 103, wherein the asymmetric cryptographic 
private key can be copied with the registered user's authorization into the possession of an 
authorise d authorized user. 

114. (Currently amended) The system of claim 113 wherein the authoris e d authorized user is a 

health care professional authorised authorized by the registered user to enter an update to the 
registered user's indexed personal information. 
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115. (Previously presented) A portable storage device for a registered user of an anonymously 
indexed electronic record system, the portable storage device being provided with information 
for associating the registered user with the portable storage device, wherein an asymmetric 
cryptographic private key is under the control of the portable storage device, wherein an 
anonymous public key certificate is associated with an asymmetric cryptographic public key 
matching the asymmetric crj^tographic private key, and wherein association of anonymously 
indexed personal information with the user is anonymously verifiable by use of the anonymous 
public key certificate. 
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